Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/FC113E3289CD11F19C9189BBCE1D38B0.roa
File: FC113E3289CD11F19C9189BBCE1D38B0.roa (raw, json)
Hash identifier: wvDztMtFp9ErIeXN+hPapsd1xp1Y+eDSDNfLR594dug=
Subject key identifier: 2F:6F:65:67:27:E1:EF:AA:3B:FB:97:67:41:03:A5:F4:D0:EF:8B:09
Certificate issuer: /CN=F36F1706AF/serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Certificate serial: 07
Authority key identifier: C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/FC113E3289CD11F19C9189BBCE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:15:22 +0000
ROA not before: Mon 27 Jul 2026 15:15:17 +0000
ROA not after: Sat 27 Jul 2030 15:15:17 +0000
asID: 327724
IP address blocks: 2001:43f8:1a20::/48 maxlen: 48
2001:43f8:1a21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Validity
Not Before: Jul 27 15:15:17 2026 GMT
Not After : Jul 27 15:15:17 2030 GMT
Subject: CN=6a67760a-d7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:d6:83:af:b1:55:e5:a2:e9:99:a0:47:1e:
3a:55:6a:9f:93:f5:c3:b6:09:74:e8:64:94:df:ef:
14:3e:c3:c9:e4:00:ee:1b:b2:47:7b:6c:3c:3d:a2:
4f:f1:ae:fa:42:01:0c:ab:64:28:a7:d6:fb:97:6a:
07:64:32:8a:fe:b4:cc:35:98:01:da:bf:4c:72:08:
e2:e7:14:52:fa:66:7a:e1:13:fe:bc:0d:aa:2a:ae:
49:8a:5a:22:5e:6c:4c:46:31:2c:eb:36:69:8c:a6:
d3:7d:d2:ab:71:72:20:0b:56:7c:31:d7:2d:82:8e:
93:a9:c2:14:0d:8c:10:17:70:f6:a1:98:08:3d:d0:
16:2c:94:ca:61:af:f8:35:4d:2b:b5:2a:ca:f1:4e:
80:e4:5d:92:bc:25:54:eb:a7:43:66:ad:4f:1c:c2:
4a:fa:46:9a:a8:14:c4:8f:89:31:04:03:60:12:71:
11:88:00:4d:9a:23:46:ae:d0:98:41:da:a5:05:73:
ba:2f:cd:ba:ae:d6:f6:51:4f:51:1d:12:56:ca:58:
1d:22:3d:fe:08:c9:4d:cd:3e:77:7d:b1:74:94:2c:
6a:e9:2e:f8:01:ba:7b:6c:a9:95:3e:3d:c5:74:67:
bf:30:e9:ca:a7:13:43:04:71:18:66:0c:6e:ee:a5:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:65:67:27:E1:EF:AA:3B:FB:97:67:41:03:A5:F4:D0:EF:8B:09
X509v3 Authority Key Identifier:
keyid:C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/FC113E3289CD11F19C9189BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1a20::/47
Signature Algorithm: sha256WithRSAEncryption
9b:fd:1d:a4:fd:79:2b:22:72:7f:7e:54:0d:12:ba:6b:01:e1:
ef:a9:dc:64:85:b6:bd:1f:fc:1f:90:82:0f:8b:b8:d3:f5:44:
f2:d8:3d:0e:03:52:5a:ef:5a:46:bf:ab:68:c3:c5:2e:b4:37:
df:f8:2e:df:63:d0:5e:9f:4c:da:1f:83:4e:84:c6:ac:2d:78:
48:dd:32:13:bb:22:b5:1d:a1:ed:17:27:d6:0a:e4:13:0b:fb:
78:cc:ce:ab:5f:00:62:7a:ed:a6:3e:5f:aa:44:9c:d9:4c:25:
7d:74:b4:01:be:b7:e5:46:72:41:fc:1b:7a:48:90:53:43:cb:
e2:46:b1:80:b3:1f:a8:13:73:f0:64:ae:9f:be:bf:93:88:17:
c9:2b:c7:d4:c3:ff:dd:19:b6:94:55:64:ce:57:21:db:9c:81:
e6:c5:8c:05:90:6b:72:4f:a9:0a:0f:f0:98:56:e9:f5:ba:52:
95:77:15:d2:d0:4d:e3:f7:e0:9a:09:e2:bb:cd:1f:90:4e:5a:
39:3f:fd:36:5a:0c:8f:4f:12:e7:29:c4:c7:d0:97:d2:7c:1c:
41:1d:1f:7c:7e:8d:e1:6e:95:26:f3:2c:24:65:a7:f7:e7:7a:
dd:12:ec:06:19:f8:c7:ed:44:ed:e6:dc:a7:0e:ef:ba:53:4a:
b4:03:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:49 2026 by rpki-client